The Round
Instinct, the legal entity behind it is Spear Street Technology, raised a $250 million Series B this week, co-led by Index Ventures and Benchmark, bringing its total funding to $350 million.
The round values the company at $2.5 billion, up from a $500 million valuation only weeks earlier, for a startup founded in 2025 by 23-year-old Noah Shinn.
What It Can Touch
Instinct is pitched as a personal agent rather than a chatbot: users connect it to email, messaging, calendar, device audio, location, screen, and keystrokes, then text or call it to act.
Its terms of service grant the company a "perpetual and irrevocable" license to user materials and the authority to enter agreements, commitments, or transactions that are legally binding on the user, without a human approval step built in for each one.
Four Failures, On The Record
These are not hypothetical risks assembled by a critic; TechCrunch documented each of the four failures below by name.
| Tester | Documented failure |
|---|---|
| Peter Yang | Instinct retained his Gmail data after he asked it to delete the connection |
| Claire Vo | Instinct kept summarizing her inbox after she disconnected access, and had stored the summaries in plain text |
| Katie Jacobs Stanton | Instinct sent an email on her behalf without asking first |
| Alex Cohen | Demonstrated Instinct could be phished via instructions planted inside an email, then deleted his account |
Four different testers, four different failure modes, one shared root cause: an assistant with standing access and standing authority does not ask permission each time it acts.
The Contract Shape Ahead Of The Law
A perpetual data license paired with standing authority to bind the user is not one company's design quirk, it is becoming the default contract shape for agentic assistants launching faster than any GDPR-specific guidance for this product category.
Europe's data protection framework assumes a service that processes data upon request. Instinct operates with continuous access to a user's inbox, calendar, screen, and microphone, and standing authority to act as their signatory, a combination current guidance never anticipated.
What To Put In Writing Before Granting Access
Instinct's four documented failures function as a checklist for any European executive or family office being pitched an agentic inbox assistant this quarter.
Demand a written, enforceable deletion guarantee that takes effect immediately on disconnection, a hard requirement for human approval before any outbound message or binding action, a plain-text-storage disclosure for anything the assistant reads, and a documented defense against prompt-injection through incoming email before any credential or calendar access is granted.
Read next: Google Buys a Bankrupt Airline's Data for AI Training | Generalist's $3B Is the Third Robot Bet This Month
